diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml
index 8ee9b1a..986a641 100644
--- a/.github/workflows/docker-image.yml
+++ b/.github/workflows/docker-image.yml
@@ -4,6 +4,8 @@
 # documentation.
 
 name: Publish Docker image
+permissions:
+  contents: read
 
 on:
   release:
diff --git a/.github/workflows/pylint.yml b/.github/workflows/pylint.yml
index 91e0e7c..8dd9d7f 100644
--- a/.github/workflows/pylint.yml
+++ b/.github/workflows/pylint.yml
@@ -1,4 +1,6 @@
 name: Pylint
+permissions:
+  contents: read
 
 on: [push]